Kubernetes – An Enterprise Guide

Elevate your Kubernetes expertise with seamless Istio integration, cutting-edge security insights, advanced CI/CD strategies, robust Prometheus and Grafana monitoring, all while excelling in multitenancy, secrets management, and global load balancing for exceptional proficiency.

Key Features

• Focuses on what you need to run Kubernetes in an Enterprise environment, based on real-world experience
• Learn how to secure clusters by adding runtime security and enhancing secrets management using direct pod mounting and Vault integration
• Get a firm command of Kubernetes from a dual perspective of an admin as well as a developer

Book Description

Stay at the forefront of cloud-native technologies with the eagerly awaited Kubernetes – An Enterprise Guide, Third Edition. Delve deep into Kubernetes and emerge with the latest insights to conquer today’s dynamic enterprise challenges.

This meticulously crafted edition equips you with the latest insights to skillfully navigate the twists and turns of ever-evolving cloud technology. Experience a more profound exploration of advanced Kubernetes deployments, revolutionary techniques, and expert strategies that redefine your cloud-native skill set. Discover cutting-edge topics reshaping the technological frontier like virtual clusters, container security, and secrets management. Gain an edge by mastering these critical aspects of Kubernetes and propelling your enterprise to new heights.

Expertly harness Kubernetes’ power for business-critical applications with insider techniques. Smoothly transition to microservices with Istio, excel at modern deployments with GitOps/CI/CD, and bolster security with OPA/Gatekeeper and KubeArmor. Integrate Kubernetes with leading tools for maximum impact in a competitive landscape. Stay ahead of the technology curve with cutting-edge strategies for innovation and growth.

Redefine cloud-native excellence with this definitive guide to leveraging Kubernetes.

What you will learn

• Manage Secrets with Vault and External Secret Operator
• Create multitenant clusters with vCluster for isolated environments
• Monitor clusters with Prometheus and visualize metrics using Grafana
• Aggregate and analyze logs centrally with OpenSearch for insights
• Build a developer platform integrating GitLab and ArgoCD for CI/CD
• Deploy applications in Istio service mesh and secure them with OPA and GateKeeper
• Secure your container runtime and halt hackers in their tracks with KubeArmor

Who this book is for

Tech enthusiasts, DevOps aficionados, and those keen on mastering containerization will revel in the insights offered by this book. Designed for DevOps engineers, developers, and system administrators seeking to amplify their IT journey, this guide is your gateway to next-level Kubernetes expertise. While some familiarity with Docker and Kubernetes is advantageous, fear not if you’re new to these concepts. A Kubernetes bootcamp is thoughtfully included, ensuring a seamless learning experience for beginners and those in need of a refresher.

Table of Contents

1. Docker and Container Essentials
2. Deploying Kubernetes Using KinD
3. Kubernetes Bootcamp
4. Services, Load Balancing, and Network Policies
5. External DNS and Global Load Balancing
6. Integrating Authentication into Your Cluster
7. RBAC Policies and Auditing
8. Managing Secrets
9. Building Multitenant Clusters with vClusters
10. Deploying a Secured Kubernetes Dashboard
11. Extending Security Using Open Policy Agent
12. Node Security with Gatekeeper
13. KubeArmor Securing Your Runtime
14. Backing Up Workloads
15. Monitoring Clusters and Workloads
16. An Introduction to Istio
17. Building and Deploying Applications on Istio
18. Provisioning a Multitenant Platform
19. Building a Developer Portal

Review

“This comprehensive guide masterfully navigates both foundational and advanced Kubernetes concepts, from multi-tenancy with vCluster to robust security management through Secrets and KubeArmor. The book offers practical insights for engineers at all levels, combining clear explanations with hands-on implementation strategies. Whether you’re new to container orchestration or fine-tuning production environments, the content delivers immediately applicable solutions.”

Abdelfettah Sghiouar, Senior Cloud Developer Advocate

About the Author

Marc Boorshtein has been a software engineer and consultant for 20 years and is currently the CTO (Chief Technology Officer) of Tremolo Security, Inc. Marc has spent most of his career building identity management solutions for large enterprises, U.S. Government civilian agencies, and local government public safety systems.

Scott Surovich has been involved in the industry for over 25 years and is currently the Global Container Engineering Lead at a tier 1 bank as the Global on-premises Kubernetes product owner architecting and, delivering cluster standards, including the surrounding ecosystem. His previous roles include working on other global engineering teams, including Windows, Linux, and virtualization.